dhx

58 ms·

451.
by dhx 15y ago
It's worth noting that Linus has three daughters. The brilliance with this rule is that his daughters may avoid spending hours fighting over the bathroom during their teenage years. Not even psychology escapes the scope of Linus' hacking pr
452.
by dhx 15y ago
It is easier for a user to scroll down a long continuous list than to hop back and forth between two columns. This is particularly true for ordered lists (as is the case with HN). The only thing I strongly dislike about HN's current design
453.
by dhx 15y ago
§66 on page 20 of Directive 2009/136/EC at [1] uses the word "information", not "cookies". Third parties may wish to store information on the equipment of a user, or gain access to information already stored, for a number of purpos
454.
by dhx 15y ago
§66 on page 20 of Directive 2009/136/EC at [1] seems to explicitly allow the use of Do-not-track header as an opt-in mechanism: Where it is technically possible and effective, in accordance with the relevant provisions of Directive
455.
by dhx 15y ago
NoScript, RequestPolicy, Adblock Plus, RefControl, UAControl, Do-not-track cookie-disabled Mozilla Firefox user here. Regulating Internet technologies to this level of pedantic granularity will ensure that spammers, scammers, crackers and f
456.
by dhx 15y ago
Tests against some commonly used software that make use of libssl to load certificates from disk (or perhaps a socket in strange circumstances): php-5.4.1RC2 (and php-5.4.0): potentially affected (one match for d2i_PKCS12_bio) tar -xj
457.
by dhx 15y ago
Yes. wget -q -O - http://swupdate.openvpn.org/community/releases/openvpn-2.2.2... | tar -xzO | grep d2i if ((eku = (EXTENDED_KEY_USAGE *)X509_get_ext_d2i (x509, NID_ext_key_usage, NULL, NULL)) == NULL) { if ((ku = (ASN1_BIT_STRING *
458.
by dhx 15y ago
To get an idea of which packages may be affected (try different functions for more results): https://github.com/search?q=d2i_X509_bio&type=Code http://www.koders.com/default.aspx?s=d2i_X509_bio Examples of impacted software include
459.
by dhx 15y ago
Sample emergency bump for Gentoo: Firstly and most importantly: check http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/dev-... to see whether the Gentoo developers have already bumped OpenSSL in the official repository. If so, i
460.
by dhx 15y ago
Summary of ocean surface topography measurement using satellite altimetry: https://en.wikipedia.org/wiki/Ocean_surface_topography
461.
by dhx 15y ago
720p WebM formatted version on YouTube: https://www.youtube.com/watch?v=faIFNkdq96U
462.
by dhx 15y ago
I don't see ZeroBin fulfilling any useful purpose for the following two reasons: 1) The encryption and decryption features do not provide data confidentiality to users because the encryption/decryption environment is not controlled by the e
463.
by dhx 15y ago
The Australian Bureau of Statistics has been collecting detailed household expenditure statistics every few years since 1984. Table 1 of Australia_Data_Tables_2009-10 (65300DO001_200910)[1] provides the following overview: Proportion (%
464.
by dhx 15y ago
GEOFON automatic earthquake detection live feed: http://geofon.gfz-potsdam.de/eqinfo/list.php Seismograms of 8.6Mww 0838UTC earthquake: http://rev.seis.sc.edu/earthquakes/2012/04/11/08/38/38 Seismograms of 8.2Mwp 1043UTC earthquake: ht
465.
by dhx 15y ago
An air freshener with network connectivity? Better disguises immediately come to mind. The power brick approach is an improvement but still makes the following assumptions: * location of network ports is at floor level hidden under desks *
466.
by dhx 15y ago
A rental address with 1 month remaining on the lease is usually accepted as a permanent physical address. How does this allow debtors to track down debts?
467.
by dhx 15y ago
Patrick McKenzie's article mentioned in comment (3) is very important. Most forms and procedures (paper and digital variants) apply unnecessary and incorrect restrictions to field values. The mistakes are carried all the way up into legisla
468.
by dhx 15y ago
It's embarrassing that I missed this crucially important factor. The only caveat I'd add is that a problem can be interesting, challenging and a dead end . Few things boost morale better than seeing your hard work pay off in a meaningful w
469.
by dhx 15y ago
Productivity for hackers: 1. At least two large monitors tuned to an accurate and comfortable brightness/contrast ratio/colour balance. 2. Ergonomic high-end chair picked by the person using it, correct desk height, monitor height and other
470.
by dhx 15y ago
HN thread from a few days ago: https://news.ycombinator.com/item?id=3719200
471.
by dhx 15y ago
Nice trick. Spoiler: HTTP/1.1 200 OK Date: Mon, 19 Mar 2012 08:49:27 GMT Server: Apache Link: <_asdf.css>;rel="stylesheet";type="text/css";media="all" Content-Length: 0 Connection: close Content-Type: text/html; char
472.
by dhx 15y ago
Not all the cave dwellings have nicely bricked exteriors and modern interiors: [1] https://secure.flickr.com/photos/sookyeeyap/sets/72157602311... [2] http://yapsookyee.blogspot.com.au/2008/03/ningxia-part-1-dir... (Ningxia - Zhangjiash
473.
by dhx 15y ago
I thoroughly agree with these points. Some further reasons why I still believe this research could prove very useful even with the problems you mentioned: 1. Perhaps multiple usage profiles can be generated based on the emotional state of t
474.
by dhx 15y ago
On automatic website refreshing: See guidelines 97 and 98 from Jakob Nielsen and Marie Tahir's book 50 Websites Deconstructed [1] for the primary reason why there has been little interest in removing the "refresh" button from browsers. Te
475.
by dhx 15y ago
Is anyone familiar with the RDP implementation on Windows and how it handles privilege separation pre and post authentication? Niels Provos, Markus Friedl, Peter Honeyman released a paper in 2003 that analysed the number of privileged (8,39
476.
by dhx 15y ago
The interesting aspect of this research is intrusion detection, not authentication. After a user has authenticated with a system (either legitimately or otherwise), analysis of keystroke or mouse movement timing patterns could raise an alar
477.
by dhx 15y ago
Physical security is the primary means of achieving human-computer authentication. Terminals in high-traffic locations, use of something along the lines of Common Access Card[1] and many other techniques can provide this level of authentica
478.
by dhx 15y ago
There were few reasons for mainstream adoption of cryptography in the early 90's. On-line commerce and communication barely existed. Thus little motive existed for public cryptography research and development. By comparison, militaries of t
479.
by dhx 15y ago
Perhaps it could be something related to: http://blog.ioactive.com/2012/02/ssl-traffic-analysis-on-goo... Or some other implementation flaw(s) in TLS. The point being, there are more ways to break crypto systems than attacking just the al
480.
by dhx 15y ago
This is poor advice that could be potentially damaging. Instead of manually building and installing from upstream source code you should bump the package version locally to ensure your system isn't littered with orphaned files later on. You

More ›